Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File:                     DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier:          WIBKrxMbRfsdcX3WDlEZYGy5UOkTKlB24Fjw3mzSfCI=
Subject key identifier:   76:35:EE:15:17:8F:B7:E7:F0:4F:31:B3:9E:73:7A:4A:F1:C9:8A:51
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer:       /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial:       01A14A6131C23A6147615FFDE37A0C0EB788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number:          07DC
Signing time:             Sat 17 Oct 2026 15:00:46 +0000
Manifest this update:     Sat 17 Oct 2026 15:00:46 +0000
Manifest next update:     Sun 18 Oct 2026 15:00:46 +0000
Files and hashes:         1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: 71CeYWe6s409+5A9Xqd5HLJk2/ovEi1GE+KWINiexUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:61:31:c2:3a:61:47:61:5f:fd:e3:7a:0c:0e:b7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
        Validity
            Not Before: Oct 17 15:00:46 2026 GMT
            Not After : Oct 18 15:00:46 2026 GMT
        Subject: CN=7635ee15178fb7e7f04f31b39e737a4af1c98a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:fd:65:e6:26:cb:bf:d3:eb:91:c5:59:58:
                    a2:c5:cc:1e:99:cd:d5:51:55:47:9e:8b:00:1f:15:
                    dd:dd:e3:9f:94:0e:74:db:f1:e3:bf:e6:74:ec:a6:
                    de:e6:4d:25:84:e8:a1:d6:18:79:50:27:33:06:64:
                    0d:34:7d:43:ea:2c:7f:f9:7c:83:48:ce:49:3a:86:
                    48:be:fe:6b:08:d8:b1:f2:f5:fd:32:63:06:e4:7e:
                    94:e0:f6:87:e6:ff:42:46:57:81:aa:78:01:90:0f:
                    f6:47:6e:bd:62:eb:4c:c2:d2:16:8b:db:3a:2f:7f:
                    86:32:5b:b4:47:8f:16:a0:f6:83:d2:33:69:26:1a:
                    c3:73:51:b6:75:f7:e4:af:71:fa:76:9d:ad:7a:d8:
                    c6:6a:0c:54:26:fd:65:7f:e7:ba:cc:44:d7:32:0c:
                    c2:58:8a:65:79:b5:04:3f:a1:ef:c9:5e:16:32:45:
                    7f:7e:2e:cd:55:5b:ee:49:56:2f:18:60:23:3b:a3:
                    4b:c5:c5:79:82:bd:50:7b:fc:a4:a9:6c:57:dd:54:
                    5a:2e:7a:21:8c:b4:99:5b:8d:ad:bd:cd:7f:a9:96:
                    f1:2a:6d:bc:32:62:77:0d:50:b6:b2:7f:58:05:0a:
                    b0:0d:a5:8d:12:38:d6:bd:56:80:4a:32:85:55:cc:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:35:EE:15:17:8F:B7:E7:F0:4F:31:B3:9E:73:7A:4A:F1:C9:8A:51
            X509v3 Authority Key Identifier:
                keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:5f:20:4f:6b:c6:05:4b:be:d0:73:88:62:b0:c4:06:a5:
         67:29:9e:14:48:31:bd:59:0f:d5:00:07:07:4c:03:10:cf:bc:
         c3:89:c8:65:a9:b7:5f:34:76:c9:0a:cf:b4:f3:cb:7b:cd:f1:
         a9:b7:05:cc:de:b9:3b:98:9d:f0:62:4e:ee:d6:b3:47:05:b5:
         b4:f0:2b:2d:63:f6:4d:da:ad:79:dc:29:4a:63:d1:c2:77:9d:
         fd:66:21:b3:69:7a:a8:f9:02:33:e6:3d:0a:f9:3b:c6:6b:f2:
         1b:65:78:ba:26:5a:bb:5a:cc:83:3b:7e:45:96:52:05:4a:b9:
         a2:fc:f7:0f:ff:ae:92:5f:2e:04:60:a3:83:f8:db:a7:ae:0a:
         aa:4c:75:61:1d:ea:dc:48:29:f6:73:20:23:dd:c8:e2:5c:99:
         7d:63:3d:bc:7c:b7:cb:74:9a:2c:63:7c:16:39:22:61:3a:a3:
         bc:68:a1:c8:e9:b4:46:f2:dc:6d:09:42:59:49:ea:70:35:cd:
         c2:c9:7f:39:87:4a:8f:16:f6:fa:09:91:73:58:ef:0e:cb:f4:
         89:65:78:85:ad:d4:d3:c7:89:06:60:ed:1c:35:af:bf:8c:da:
         90:a4:2e:fb:0d:c6:33:0e:a5:5c:4c:fd:ca:be:a5:ef:09:d4:
         6f:3e:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:26:54 2026 by rpki-client